$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0/2a43a868-3d14-440f-a95a-5428c232c5d0.mft File: 2a43a868-3d14-440f-a95a-5428c232c5d0.mft (raw, json) Hash identifier: 2YjXvfVEjLuT+FntM4w8wnyGPp7P8rEkeVTMM+tQ8WM= Subject key identifier: 5A:00:57:BF:11:54:1C:3B:C4:A9:C5:23:CE:93:8F:2E:1F:19:50:FD Authority key identifier: 8A:E9:B1:DB:3E:1C:E3:90:30:AA:C9:E4:44:E2:AF:BB:97:F1:4B:32 Certificate issuer: /CN=2a43a868-3d14-440f-a95a-5428c232c5d0 Certificate serial: 010D0C9F4328584E057D89A230A50D38B11E4A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0/2a43a868-3d14-440f-a95a-5428c232c5d0.mft Manifest number: 010D0C9F4328584D12A4CFA7D715AE6277072ED9 Signing time: Mon 01 Jun 2026 00:00:23 +0000 Manifest this update: Mon 01 Jun 2026 00:00:23 +0000 Manifest next update: Wed 03 Jun 2026 00:00:00 +0000 Files and hashes: 1: 2a43a868-3d14-440f-a95a-5428c232c5d0.crl (hash: hUh7dYZ7lRvyZO4V5J3Nh0u0hrHfY1PVqXWxF9lH+3s=) 2: e93a5b63-6268-38f6-b20d-f5c2fcf1e8d7.roa (hash: fU7ezug3XUAwZOclqJTMHpq7EZ11/WAJUZ0d3sGAzxc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0/2a43a868-3d14-440f-a95a-5428c232c5d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0/2a43a868-3d14-440f-a95a-5428c232c5d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 03 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:7d:89:a2:30:a5:0d:38:b1:1e:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a43a868-3d14-440f-a95a-5428c232c5d0 Validity Not Before: Jun 1 00:00:23 2026 GMT Not After : Jun 3 00:00:00 2026 GMT Subject: CN=5a21842a-3071-4219-aa09-9306a4453a07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:04:3f:e1:71:9a:21:0b:6d:26:0a:88:df:79: c1:d3:42:20:2a:e1:e3:5d:5d:07:28:90:ec:1f:42: c6:33:24:c9:c6:8f:05:b5:78:da:32:64:7a:a6:95: 56:18:a5:99:f3:d5:e1:0a:7f:7f:0e:2d:5a:ce:42: 41:35:45:98:4c:24:be:d2:4c:f8:74:2e:25:33:4d: 52:4f:d7:93:3b:87:ad:28:bf:4a:20:e8:3d:b6:42: 36:14:72:fa:6b:4c:a7:c0:e8:c5:46:ed:91:14:68: 64:5b:6f:ee:9e:31:79:ad:8e:08:93:47:10:23:3f: 82:16:90:99:9b:61:f1:dd:10:e3:cc:a2:59:01:7e: a2:cd:62:b1:58:88:27:ed:29:f7:13:dd:01:f1:09: 3a:3d:51:aa:5d:6b:c6:a9:0b:c0:8e:bb:9e:7d:ce: 2e:bf:a3:bc:02:3c:be:8f:0f:9d:91:fc:e3:a3:05: de:51:fc:6c:57:e2:a4:25:02:e7:81:ff:24:8f:69: d1:2d:c9:9a:21:fa:a7:28:a3:db:5a:94:68:78:ce: 80:63:88:5c:5d:fb:8b:c6:0c:4e:72:2c:47:c5:60: 86:be:e4:cd:6e:55:49:49:4a:88:fe:a9:7b:60:42: 03:a9:c8:31:7a:49:37:2b:54:cd:37:37:bb:01:44: cf:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:00:57:BF:11:54:1C:3B:C4:A9:C5:23:CE:93:8F:2E:1F:19:50:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0/2a43a868-3d14-440f-a95a-5428c232c5d0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0/2a43a868-3d14-440f-a95a-5428c232c5d0.crl X509v3 Authority Key Identifier: keyid:8A:E9:B1:DB:3E:1C:E3:90:30:AA:C9:E4:44:E2:AF:BB:97:F1:4B:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:2f:d1:e2:af:86:5d:b4:7e:0a:94:0f:97:a1:07:56:c7:c2: 2c:a3:f3:82:a3:4d:88:ed:f9:9a:28:50:87:76:2c:ca:15:06: 37:32:a1:1d:51:81:ce:d7:eb:5a:76:cd:f5:c5:3a:81:d4:f1: b6:60:9c:ba:d2:91:76:2f:78:77:51:8d:cf:42:e0:09:5c:45: b9:db:f6:b4:20:f3:c2:32:db:15:e9:0f:aa:fd:7b:40:23:63: de:ec:0c:c2:30:87:24:2f:da:29:19:b9:db:58:07:eb:7d:0c: 6e:2e:8d:fc:0a:c6:b6:80:e8:60:6c:7a:b3:35:73:2e:f1:e9: c3:8b:cb:99:fa:6e:7b:70:53:fe:57:06:39:ee:2a:32:2b:5f: b2:e5:70:13:88:c3:65:d7:67:b2:5a:46:5d:85:16:aa:44:b0: 74:56:09:55:8e:c4:4d:35:d4:3a:c9:b2:5e:7b:2a:e7:98:ef: d4:fe:db:e2:4c:61:3f:21:73:dd:cb:29:cf:e0:73:7a:1a:39: fb:88:2e:11:c5:4e:08:7a:0d:aa:90:68:f2:e0:f3:01:c4:90: e6:99:77:c8:1a:b7:f6:e3:24:a8:26:ae:28:b7:38:57:4e:4d: 6c:3a:35:31:b3:b0:82:ce:94:a8:fc:cc:5e:fa:77:43:12:3a: 4a:de:49:a9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE4FfYmiMKUNOLEeSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE0M2E4NjgtM2QxNC00NDBmLWE5NWEtNTQyOGMyMzJj NWQwMB4XDTI2MDYwMTAwMDAyM1oXDTI2MDYwMzAwMDAwMFowLzEtMCsGA1UEAxMk NWEyMTg0MmEtMzA3MS00MjE5LWFhMDktOTMwNmE0NDUzYTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gQ/4XGaIQttJgqI33nB00IgKuHjXV0HKJDs H0LGMyTJxo8FtXjaMmR6ppVWGKWZ89XhCn9/Di1azkJBNUWYTCS+0kz4dC4lM01S T9eTO4etKL9KIOg9tkI2FHL6a0ynwOjFRu2RFGhkW2/unjF5rY4Ik0cQIz+CFpCZ m2Hx3RDjzKJZAX6izWKxWIgn7Sn3E90B8Qk6PVGqXWvGqQvAjruefc4uv6O8Ajy+ jw+dkfzjowXeUfxsV+KkJQLngf8kj2nRLcmaIfqnKKPbWpRoeM6AY4hcXfuLxgxO cixHxWCGvuTNblVJSUqI/ql7YEIDqcgxekk3K1TNNze7AUTPrQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFoAV78RVBw7xKnFI86Tjy4fGVD9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8yYTQz YTg2OC0zZDE0LTQ0MGYtYTk1YS01NDI4YzIzMmM1ZDAvMmE0M2E4NjgtM2QxNC00 NDBmLWE5NWEtNTQyOGMyMzJjNWQwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMmE0M2E4NjgtM2QxNC00NDBmLWE5 NWEtNTQyOGMyMzJjNWQwLzJhNDNhODY4LTNkMTQtNDQwZi1hOTVhLTU0MjhjMjMy YzVkMC5jcmwwHwYDVR0jBBgwFoAUiumx2z4c45AwqsnkROKvu5fxSzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8yYTQzYTg2OC0zZDE0LTQ0MGYtYTk1YS01NDI4 YzIzMmM1ZDAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQApL9Hir4ZdtH4KlA+XoQdW x8Iso/OCo02I7fmaKFCHdizKFQY3MqEdUYHO1+tads31xTqB1PG2YJy60pF2L3h3 UY3PQuAJXEW52/a0IPPCMtsV6Q+q/XtAI2Pe7AzCMIckL9opGbnbWAfrfQxuLo38 Csa2gOhgbHqzNXMu8enDi8uZ+m57cFP+VwY57ioyK1+y5XATiMNl12eyWkZdhRaq RLB0VglVjsRNNdQ6ybJeeyrnmO/U/tviTGE/IXPdyynP4HN6Gjn7iC4RxU4Ieg2q kGjy4PMBxJDmmXfIGrf24ySoJq4otzhXTk1sOjUxs7CCzpSo/Mxe+ndDEjpK3kmp -----END CERTIFICATE-----Generated at Mon Jun 1 21:54:19 2026 by rpki-client